Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
File: 0760737E587C11EE8B2A0A2EC4F9AE02.roa (raw, json)
Hash identifier: qQEIOEXWu9GLuzL2WJ7QWtN2cSaiFuzi7NUvxyw2Dxw=
Subject key identifier: F5:EB:45:71:75:18:AD:56:F4:4C:6A:26:81:B7:A1:2C:C7:FD:F4:BC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7A8D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
Signing time: Thu 21 Sep 2023 12:40:22 +0000
ROA not before: Thu 21 Sep 2023 12:40:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137125
IP address blocks: 27.48.0.0/22 maxlen: 22
27.48.4.0/22 maxlen: 22
27.48.8.0/22 maxlen: 22
27.48.12.0/22 maxlen: 22
27.48.16.0/22 maxlen: 22
27.48.20.0/22 maxlen: 22
27.48.24.0/22 maxlen: 22
27.48.28.0/22 maxlen: 22
27.48.32.0/22 maxlen: 22
27.48.36.0/22 maxlen: 22
27.48.40.0/22 maxlen: 22
27.48.44.0/22 maxlen: 22
27.48.48.0/22 maxlen: 22
27.48.52.0/22 maxlen: 22
27.48.56.0/22 maxlen: 22
27.48.60.0/22 maxlen: 22
27.48.64.0/22 maxlen: 22
27.48.68.0/22 maxlen: 22
27.48.72.0/22 maxlen: 22
27.48.76.0/22 maxlen: 22
27.48.80.0/22 maxlen: 22
27.48.84.0/22 maxlen: 22
27.48.88.0/22 maxlen: 22
27.48.92.0/22 maxlen: 22
27.48.96.0/22 maxlen: 22
27.48.100.0/22 maxlen: 22
27.48.104.0/22 maxlen: 22
27.48.108.0/22 maxlen: 22
27.48.112.0/22 maxlen: 22
27.48.116.0/22 maxlen: 22
27.48.120.0/22 maxlen: 22
27.48.124.0/22 maxlen: 22
27.48.128.0/22 maxlen: 22
27.48.132.0/22 maxlen: 22
27.48.136.0/22 maxlen: 22
27.48.140.0/22 maxlen: 22
27.48.144.0/21 maxlen: 22
27.48.152.0/22 maxlen: 22
27.48.156.0/22 maxlen: 22
27.48.160.0/20 maxlen: 20
27.48.160.0/22 maxlen: 22
27.48.164.0/22 maxlen: 22
27.48.168.0/22 maxlen: 22
27.48.172.0/22 maxlen: 22
27.48.176.0/22 maxlen: 22
27.48.180.0/22 maxlen: 22
27.48.184.0/22 maxlen: 22
27.48.188.0/22 maxlen: 22
27.48.192.0/22 maxlen: 22
27.48.196.0/22 maxlen: 22
27.48.200.0/22 maxlen: 22
27.48.204.0/22 maxlen: 22
27.48.208.0/22 maxlen: 22
27.48.212.0/22 maxlen: 22
27.48.216.0/22 maxlen: 22
27.48.220.0/22 maxlen: 22
27.48.224.0/22 maxlen: 22
27.48.228.0/22 maxlen: 22
27.48.232.0/22 maxlen: 22
27.48.236.0/22 maxlen: 22
27.48.240.0/22 maxlen: 22
27.48.244.0/22 maxlen: 22
27.48.248.0/22 maxlen: 22
27.48.252.0/22 maxlen: 22
103.112.24.0/22 maxlen: 24
122.50.128.0/18 maxlen: 24
122.50.192.0/18 maxlen: 24
202.62.224.0/20 maxlen: 24
202.137.208.0/20 maxlen: 24
203.98.96.0/19 maxlen: 24
2404:c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31373 (0x7a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 21 12:40:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=650c39b6-9577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:18:db:db:da:0c:c6:02:18:6b:19:31:4f:
49:6b:27:58:99:c3:4d:2d:3b:f0:7c:19:ed:87:47:
b6:9f:b7:df:01:3a:f7:9f:2a:6d:c4:11:cf:c2:6c:
66:8d:80:3d:63:7f:3d:82:1d:14:35:61:55:9b:c8:
be:ee:c7:7b:7b:9a:06:12:4c:00:22:e9:e8:5c:c9:
63:44:c8:ee:b6:a5:33:61:ec:51:88:25:f9:f9:11:
1d:b2:5c:ec:da:3c:72:99:de:42:db:b9:f5:e1:c9:
30:29:61:c8:20:c0:55:9a:b5:2a:3e:2d:2c:77:f0:
99:af:ab:7e:69:7f:da:8f:77:00:b0:77:54:86:3d:
ca:be:02:c7:8d:55:f8:eb:b3:c6:52:0c:ee:b6:24:
80:b8:63:f5:4a:e2:7c:e9:95:67:67:01:03:33:da:
2e:01:c5:7f:a3:b9:da:c0:1f:a2:82:f3:49:8e:da:
b3:42:83:b9:34:7e:41:65:f1:54:a0:4c:01:dc:b9:
8f:68:54:b4:f6:31:7a:d3:c2:3e:2b:ad:64:b3:ae:
09:dd:06:06:13:0c:ae:3b:5f:8f:05:8b:ec:d1:bd:
a2:a1:00:86:0d:79:81:4c:e1:1b:ba:ee:ef:b7:ef:
3b:9d:e1:ef:d5:eb:1f:3f:59:da:59:a9:78:41:76:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EB:45:71:75:18:AD:56:F4:4C:6A:26:81:B7:A1:2C:C7:FD:F4:BC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.48.0.0/16
103.112.24.0/22
122.50.128.0/17
202.62.224.0/20
202.137.208.0/20
203.98.96.0/19
IPv6:
2404:c00::/32
Signature Algorithm: sha256WithRSAEncryption
8b:54:c9:ba:d3:81:8b:c0:56:55:bb:e8:a4:00:99:ea:0c:4c:
29:44:15:61:fb:5e:90:f0:a9:a6:44:8d:71:7f:51:b0:63:4a:
e5:74:ee:11:a8:4c:3c:16:29:f1:e3:9d:91:be:b4:aa:82:62:
d2:a5:06:7d:52:fd:78:8c:e5:ca:dd:c5:3d:88:92:0d:4f:86:
cc:44:57:02:ae:0f:0b:7b:66:aa:61:da:73:82:ff:08:90:b1:
a0:9b:d4:f6:5c:1d:3f:8f:fe:6e:83:bf:61:da:ae:7d:f8:f8:
ba:5f:5f:c3:ec:28:fa:24:00:66:42:e1:2a:ea:4b:3e:a2:50:
52:70:9f:f4:e1:5c:21:fa:0f:38:02:07:49:40:2a:92:d1:3f:
ba:76:95:ce:d5:9f:44:fd:35:2d:7b:51:a8:70:d7:25:29:5b:
8a:21:3e:a0:fe:54:be:6f:4b:ff:01:fe:d3:c0:f3:56:90:ed:
d6:c6:30:c6:6c:4e:d7:8b:c2:29:f4:75:6a:1b:06:19:eb:97:
0f:57:02:dd:98:bb:1c:ed:ac:81:f1:57:96:25:46:e6:19:6c:
b4:af:97:3f:4c:4d:1c:13:7e:27:84:d4:ad:7c:c9:e8:2e:b4:
19:74:7a:69:d6:57:bb:a4:69:4d:af:91:9f:68:8b:85:c6:da:
5d:53:03:53
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgICeo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwOTIxMTI0MDIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBjMzliNi05NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IUY29vaDMYCGGsZMU9JaydYmcNNLTvwfBnth0e2n7ffATr3nyptxBHPwmxm
jYA9Y389gh0UNWFVm8i+7sd7e5oGEkwAIunoXMljRMjutqUzYexRiCX5+REdslzs
2jxymd5C27n14ckwKWHIIMBVmrUqPi0sd/CZr6t+aX/aj3cAsHdUhj3KvgLHjVX4
67PGUgzutiSAuGP1SuJ86ZVnZwEDM9ouAcV/o7nawB+igvNJjtqzQoO5NH5BZfFU
oEwB3LmPaFS09jF608I+K61ks64J3QYGEwyuO1+PBYvs0b2ioQCGDXmBTOEbuu7v
t+87neHv1esfP1naWal4QXY8iwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFPXrRXF1
GK1W9ExqJoG3oSzH/fS8MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDc2MDczN0U1
ODdDMTFFRThCMkEwQTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E
PDA6MCkEAgABMCMDAwAbMAMEAmdwGAMEB3oygAMEBMo+4AMEBMqJ0AMEBctiYDAN
BAIAAjAHAwUAJAQMADANBgkqhkiG9w0BAQsFAAOCAQEAi1TJutOBi8BWVbvopACZ
6gxMKUQVYftekPCppkSNcX9RsGNK5XTuEahMPBYp8eOdkb60qoJi0qUGfVL9eIzl
yt3FPYiSDU+GzERXAq4PC3tmqmHac4L/CJCxoJvU9lwdP4/+boO/Ydquffj4ul9f
w+wo+iQAZkLhKupLPqJQUnCf9OFcIfoPOAIHSUAqktE/unaVztWfRP01LXtRqHDX
JSlbiiE+oP5Uvm9L/wH+08DzVpDt1sYwxmxO14vCKfR1ahsGGeuXD1cC3Zi7HO2s
gfFXliVG5hlstK+XP0xNHBN+J4TUrXzJ6C60GXR6adZXu6RpTa+Rn2iLhcbaXVMD
Uw==
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org